Privacy at DataWise

The short answer#

We collect only what you send us, we use it only to answer you, and we never sell it, pool it, or add you to a mailing list. This page explains exactly what that means for the two places on this site where anything is collected from you: the contact form and AI Mode. There is one further thing we record, and it is not about you at all: we count how often search-engine and AI crawlers fetch our pages. It is described in full below.

Who we are#

DataWise Data Science (Dan Malka) is a boutique data-science consultancy based in Israel. For any question about your data, or to exercise the rights below, write to hello@datawiseds.com. The founder reads it personally.

The contact form#

When you write to us through the form, you send your name, your email, an optional company name, and a description of your problem. We use it for one thing: to reply and, if it makes sense, to scope your project. The message reaches us two ways, both only so we can follow up: it is delivered to our inbox through EmailJS, our email-delivery provider, and the same details also open a record in our own internal scheduling and follow-up system (run by DataWise, not a third party). We do not build a marketing list from them, and we never sell them or hand them to any outside party. This is the same commitment as the confidentiality note on our contact page: no mailing lists, no third-party sharing, and no naming you anywhere without your written permission.

AI Mode#

AI Mode answers your questions using only the content published on this site. When you ask something, your question is sent to our answering service and to Google’s Gemini, the AI provider that generates the answer (with Cerebras as a fallback provider if Gemini is unavailable); the relevant passages are matched on our own edge, not by a third party. We designed it to keep as little as possible: your questions and your IP address are never stored on our servers, and conversations are ephemeral, so nothing is kept after the session. For operations we log only technical events (which passages were retrieved, response times, and token usage), never the content of what you asked, and the conversation itself lives only in your browser’s session storage. An invisible bot check (Cloudflare Turnstile) runs on your first message to keep the service available. AI answers can be imperfect; verify anything critical with us directly.

Booking hand-off in AI Mode#

To book a scoping call, you enter your name and email, and we receive those so we can confirm the call. The booking itself is handled by our own scheduling system (at meet.datawiseds.com, run by DataWise, not a third party). Booking requests reach it through Cloudflare, but our server does not receive, use, or store your IP address: abuse protection is aggregate rate-limiting, not per-visitor. At the network edge, IP handling is governed by Cloudflare’s own policy, outside our systems.

Sharing anything from the conversation is a separate, optional step, and it is off unless you turn it on. When you book from inside AI Mode you see a checkbox that is unchecked by default. Only if you tick it do we add a short snapshot to help us prepare: the questions you typed in that session, the page you were on, and your language, and nothing else. The checkbox shows you the exact list before you continue. We never include the answers you were given, or anything you typed into any other form, and we never attach your IP address to it. If you leave the box unchecked and simply book the call, nothing from the conversation is shared.

Counting crawler visits#

Search engines and AI assistants send automated crawlers (Googlebot, Bingbot, GPTBot, ClaudeBot, PerplexityBot and others) to read our pages. We record when they do, because whether these crawlers reach a page decides whether that page can ever appear in a search result or an AI answer, and until now we had no way to see it.

For every request the site serves, we add one to an hourly tally. That tally is a number and nothing else: no address, no identifier, nothing that could be traced to a person or a device.

When a request identifies itself as a known crawler, we additionally record which crawler it claims to be, which page it asked for, what our server answered, and whether we could confirm the claim. A user-agent string is trivially faked, so we check it: either the visiting address falls inside a range the crawler’s owner publishes, or a reverse-then-forward DNS lookup confirms it. That address is used for the check and is discarded immediately. It is never written down. The record we keep has no field for it, by design.

Nothing here identifies a person. If you are reading this page in a browser, the only trace you leave is one anonymous increment to an hourly count.

What we never do#

Your data stays for your purpose only. Nothing is sold, nothing is pooled, and nothing you send is used to train or improve anyone’s models.

Cookies and storage#

This site sets no cookies and runs no advertising trackers. We use privacy-preserving, cookieless analytics: anonymous, aggregate counts of a few events (like how many visitors opened AI Mode or started a booking). It sets no cookies, stores nothing on your device, keeps no IP address and no personal data, and never tracks you across sites, so it needs no consent. The only things kept in your browser are strictly-necessary storage: AI Mode’s current conversation and the tokens that keep it working (in session storage, cleared when you close the tab), and two small functional flags in local storage (one recording that you have seen the storage notice, one guarding against a duplicate contact message) that hold no personal data and track no one. The full list is on our cookie policy.

Sub-processors#

A short list of the services that may handle your data on our behalf: EmailJS (delivers contact-form messages), Google Gemini (generates AI Mode answers, with Cerebras as a fallback provider), Cloudflare (invisible bot protection for AI Mode), and our hosting provider. Some are outside Israel and the EU; where your data crosses borders it does so only to provide these functions, under those providers’ own safeguards.

Who controls your data#

The controller of any personal data described here is DataWise Data Science (Dan Malka), based in Israel. That means we decide what is collected and why, and we are the people you deal with about it. Write to hello@datawiseds.com.

Why we are allowed to use it (legal bases)#

For visitors in the EU and UK, the law asks us to name a lawful basis for each use. There are two, and they are simple:

• Your consent, for the contact form. You choose to write to us and to send the details in it, and you can withdraw that consent at any time by asking us to delete the message.
• Our legitimate interest, for keeping the site and AI Mode secure and available, which is why the invisible bot check (Cloudflare Turnstile) runs. This is a narrow, expected use, and it does not involve profiling you.

How long we keep things#

We keep personal data only as long as we need it. Contact-form details stay with us for as long as the conversation is useful, so we can reply and, if it makes sense, scope your project; you can ask us to delete them at any time. They are never on a marketing list and never shared. AI Mode keeps nothing after the session.

International transfers#

We are based in Israel, and some of the providers that help run the site are located outside Israel and the EU. Where your data crosses a border it does so only to provide the functions described on this page, and only through the providers listed under sub-processors, under those providers’ own safeguards. We do not move your data across borders for any other reason.

Your rights#

Because we keep so little, exercising any of these is usually a one-email matter. Write to hello@datawiseds.com and tell us what you want to do; we will handle it, and we will not treat you differently for asking.

• If you are in the EU or UK (GDPR). You have the right to access the data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw any consent you gave. You also have the right to complain to your local data-protection supervisory authority.
• If you are in the US, including California (CCPA and CPRA). You have the right to know what personal information we hold and to have it deleted or corrected, and the right to opt out of the sale or sharing of personal information. To be clear, DataWise does not sell or share your personal information, so there is nothing to opt out of, and we will never discriminate against you for exercising any of these rights.
• If you are in Israel (Privacy Protection Law). You have the right to access the information we hold about you and to ask us to correct it.

These are the standard rights the main privacy laws provide; we honor them regardless of where you are, and this is not a claim of formal certification under any of them.

Changes#

If this policy changes, the date at the top of this page changes with it. Last updated: 6 August 2026.